An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Sep 29, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Oct 4, 2023 |
| Debian | — | Upgrade linux | May 15, 2025 | Oct 4, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Oct 4, 2023 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade dtb-exynosUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-64kb | Nov 3, 2023 | Oct 4, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub